CVE-2018-6961

CVE-2018-6961 Exploit in Python3 VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this...

Drupalgedon3

Drupal 익스플로잇 POC SA-CORE-2018-004 / CVE-2018-7602 저자 Alexandre Nguyen 사용법 root@kitploit: usage: exploit.py -h --command --nodeid --url POC for Drupal vulnerability SA-CORE-2018-004 arguments: -h, --help show this help message and exit --command Command to inject --nodeid Node to target --url Drup...

noSAMBAnoCRY-CVE-2017-7494

noSAMBAnoCRY CVE-2017-7494 Remote exploit for the SAMBA CVE-2017-7494 vulnerability aka isknowpipename! Details This exploit is divided in 3 parts: Compiles the evilLib in following archs: x8664 , x86, or i686 Finds a writeable share and uploads evilLib to it! Loads evilLib, if everything goes...

CVE-2019-0230

What's this This is a Simple test Project for S2-059 which can be used to analysis the detail of this vulnerability. How to use Step 1:Use IDEA import this project Step 2:setup tomcat Server Step 3:Use browser access "http://ip:port/SimpleStrutswarexploded/S2059?id=%2588" How to Exploit...

CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. 0x00 Dork shodan root@kitploit: title:"GoAnywhere" FOFA root@kitploit: title="GoAnywhere" 0x01 Use Java...

CVE-2026-82703

A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file www/ping.asp of the component aspsetPing Endpoint. Performing a manipulation of the argument pingstr results in os command injection. The attack can be initiated remotely. The...

CVE-2026-82702

A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component aspWlanMP Endpoint. Such manipulation of the argument ateFunc leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly...

CVE-2026-82701

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

CVE-2026-59111

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Digitální a informační agentura DIA eObčanka-Identifikace on MacOS enables an attacker to register a custom URL scheme czeeopauth:// for parameterized application execution. Prior to version...

CVE-2021-22204

CVE-2021-22204 Vulnerability exiftool Arbitrary Command Execution Usage 1. Set the IP and port to receive the reverse shell in the exploit.py file, then run docker compose up 2. After accessing the docker shell, running python3 exploit.py in the /root path will generate the image.jpg attack code ...

POC-exploit-for-Dolibarr

Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost Listening host fo...

Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 4.6.3. CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...

CVE-2024-23346

🚀 CVE-2024-23346 Chemistry - HTB This repository contains a Crystallographic Information File CIF intended for use on the "Chemistry" machine on Hack The Box HTB. CIF File Example root@kitploit: dataExample celllengtha 10.00000 celllengthb 10.00000 celllengthc 10.00000 cellanglealpha 90.00000...

CVE-2026-75132

WAPT Server versions 2.6.1.17834 and earlier contain a SQL injection vulnerability in the columns parameter of the GET /api/v3/hosts endpoint. A remote authenticated user with read-only privileges can inject arbitrary PostgreSQL expressions into the SQL query constructed by WAPT, allowing them to...

EUVD-2026-68606

WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the columns parameter of the GET /api/v3/hosts endpoint. A remote authenticated user with read-only privileges can inject arbitrary PostgreSQL expressions into the SQL query constructed by WAPT. By exploiting t...

xwiki-cve-2025-24893-poc

XWiki RCE Exploit PoC CVE-2025-24893 Overview This repository contains a Proof of Concept PoC exploit for the XWiki Remote Code Execution RCE vulnerability identified as CVE-2025-24893. The vulnerability allows an attacker to execute arbitrary code on a target XWiki instance by leveraging a craft...

CVE-2025-69212-Exploit

CVE-2025-69212 - OpenSTAManager P7M Command Injection Exploit A fully automated exploit script for CVE-2025-69212 , a command injection vulnerability in OpenSTAManager. This script authenticates with admin credentials, deploys a malicious PHP web shell via a crafted P7M file in a ZIP archive, and...

Zygotroller

Zygotroller 2024年6月より前の開発者モードデバイス（Android 12+）でプロファイルオーナー/Family Linkを削除する Zygotroller は、CVE-2024-31317 の Zygote インジェクションバグを使用して、プロファイルオーナーと関連する制限を削除できる概念実証です。 これには、開発者モードと、2024年6月より前の最新セキュリティパッチが必要です。 このリポジトリでは、Google のペアレンタルコントロールシステムである Family Link を例として示しています。 使用方法 コンパイルには、Debian...

Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 4.5.5. CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...

CVE-2025-1974

데모 https://youtu.be/3hYlHeaf2mQ CVE-2025-1974란? CVE-2025-1974 IngressNightmare는 Kubernetes ingress-nginx admission controller에서 발견된 심각한 CVSS 9.8 인증되지 않은 원격 코드 실행 취약점입니다. 공격 흐름: 1. 업로드 : HTTP POST를 통해 악성 공유 라이브러리.so 파일를 NGINX로 전송 2. 주입 : sslengine 지시어를 주입하는 어노테이션이 포함된 조작된 Ingress 관련...